medium6.8Public exploit code
CVE-2006-6845
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01se…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CMS Made Simple 1.0.2 - 'SearchInput' Cross-Site Scripting2006-12-11 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cmsmadesimple | Cms Made Simple | Version 1.0.2 |
References
- NVD record
- CVE.org record
- http://osvdb.org/32571
- http://secunia.com/advisories/23582
- http://www.securityfocus.com/archive/1/455417/100/0/threaded
- http://www.securityfocus.com/bid/21527
- http://www.vupen.com/english/advisories/2007/0027
- http://osvdb.org/32571
- http://secunia.com/advisories/23582
- http://www.securityfocus.com/archive/1/455417/100/0/threaded
- http://www.securityfocus.com/bid/21527
- http://www.vupen.com/english/advisories/2007/0027